An engineering studio of one

Security-first software,
shipped.

Wellz is the studio of Wellington Mukahiwa — five apps shipped to the App Store, production web platforms in the field, and incident response on real breaches. Built end-to-end. Hardened from the first commit.

Shipped
5 iOS apps on the App Store
Live
4+ production web platforms
Investigated
1 live production breach, contained
Recognition
1st Walsh Shark Tank 2026
Featured work

Three pieces from the catalogue — an award-winning iOS terminal, a HIPAA-aware pharmacy platform, and a contained production breach. Full case studies on the Work page.

NetShell — iOS SSH Terminal app icon
iOS · Shipped 2026

NetShell

An iOS SSH terminal and network manager built for system administrators. First place at Walsh University Shark Tank 2026.

  • Swift
  • SwiftUI
  • SwiftData
  • NIO/Citadel
  • WidgetKit
T&H Pharmacy prescriber portal
Web · Live 2025 — Present

T&H Pharmacy

HIPAA-aware compounding pharmacy platform with NPI-verified prescriber portal, TOTP 2FA, hardened admin dashboard, and full deliverability stack.

  • PHP 8
  • MySQL
  • TOTP 2FA
  • reCAPTCHA v3
  • NPI API
How Wellz can help

Engineering that
holds up under scrutiny.

Four ways the studio engages — from a one-week security audit to a full iOS launch with App Store submission. Every engagement starts with a written scope.

01 / Security

Security audits & incident response

Find the weak points before an attacker does — or contain the damage if they already have.

  • Application + infrastructure audits (OWASP-aligned)
  • Live breach containment + forensic timeline
  • Mail-server hardening (SPF, DKIM, DMARC)
02 / iOS

Native iOS app development

Shipping an iOS app from scratch — design, build, App Store submission, and lifecycle support.

  • Swift + SwiftUI + SwiftData, iOS 17+
  • HealthKit, WidgetKit, watchOS companion apps
  • Foundation Models (on-device AI) integration
03 / Web

Full-stack web platforms

Production-grade PHP + MySQL platforms hardened from day one — CSRF, prepared statements, 2FA, deliverability.

  • Public marketing sites + authenticated portals
  • Admin dashboards on obscured paths
  • Strict PHP 8 with declare(strict_types=1)
04 / Infrastructure

Identity & infrastructure

The plumbing that keeps the lights on — SSO, VPN, DNS filtering, monitoring, and the rest of the boring-on-purpose stack.

  • Authentik SSO/LDAP/RADIUS deployment
  • WireGuard / Mullvad VPN gateways
  • Pi-hole DNS, fail2ban, UFW, CrowdSec
Recognition

The work that
got noticed.

2026
1st place — Walsh University Shark Tank. NetShell pitched and won against student startups across the university.
2026
Invited panelist — Walsh University Cybersecurity Summit. "Future Workforce Voice" alongside Dean Lambert and Tyler Hudak. Global South perspective on the next generation of cybersecurity practitioners.
2026
5 iOS apps live on the App Store. NetShell, OneThought, A Dead Men's Switch, Water Reminder+, BillSwift — all solo-developed.
2025
AWS Certified Cloud Practitioner. Issued 04/2025.
2025
Live production breach contained. RunMe.Tech multi-stage compromise — root cause identified, kill chain reconstructed, system restored.
"Wellington has continually impressed with his cybersecurity acumen, secure web systems, and SEO insight. He's the kind of detail-oriented developer who blends technical skill with strategic vision."
— Dr. Daniel Passerini, Executive Director of Cross-Enterprise Operations, Walsh University
Engage

Got a project
that needs to ship?

Start a project Direct email